You can disable certain bridge port using command
/interface bridge port set [ find interface=ether2 ] disabled=yes
... or
disabled=no to enable it again. Use that in a scheduled script ...
This completely disables bridge port, also for LAN traffic. If you want to disable only internet access for devices connected to that port ... then that's a bigger problem ... unless you know (LAN) IP addresses of those devices in which case you block access based on src-address ...